#!

###########################
# Log Settings 
###########################
config log setting
set brief-traffic-format disable
set daemon-log disable
set fwpolicy-implicit-log enable
set fwpolicy6-implicit-log disable
set gui-location fortianalyzer
set local-in-allow enable 
set local-out disable
set local-in-deny enable 
set resolve-apps enable 
set resolve-hosts enable
set resolve-ip enable
set user-anonymize disable 
end
###########################
# Log Settings Device
###########################
config log fortianalyzer setting
set status enable 
set ips-archive  enable 
set server 4.4.4.4
set enc-algorithm default
set localid mydomain1-sg0e0
# set psksecret only4mydomain1!
set conn-timeout 10
set monitor-keepalive-period 5
set monitor-failure-retry-period 5
set source-ip 0.0.0.0
set upload-option realtime 
set reliabl enable
end
config log memory setting
set status disable
# set diskfull overwrite
end
#
# If memory log is used set max-size as
# warning threshold.
#
# For "max-size" value "bytes" are used.
#
# config log memory global-setting 
# set full-final-warning-threshold 95
# set full-first-warning-threshold 75
# set full-second-warning-threshold 90
# set max-size 65536
# end
config log disk setting
set status disable
# set diskfull overwrite
end
config log syslogd setting
set status disable
end
#
# Disable fortiguard log because
# forticloud is not in use. 
#
# To enable fortiguard log ID of 
# forticloud is needed.
#
config log fortiguard setting
set status disable
# set location fortiguard
# set resolve-apps enable
# set resolve-hosts enable
end
###########################
# Log Settings Device Filter
###########################
config log fortianalyzer filter
set app-ctrl enable 
set attack enable 
set dlp enable 
set dlp-archive enable 
set email enable 
set forward-traffic enable 
set local-traffic enable 
set netscan enable 
set severity information 
set traffic enable 
set virus enable 
set voip enable 
set web enable 
set analytics enable 
set anomaly enable 
set app-ctrl-all enable 
set blocked enable 
set discovery enable 
set dlp-all enable 
set dlp-docsource enable 
set email-log-google enable 
set email-log-imap enable 
set email-log-msn enable 
set email-log-pop3 enable 
set email-log-smtp enable 
set email-log-yahoo enable 
set ftgd-wf-block enable 
set ftgd-wf-errors enable 
set infected enable 
set multicast-traffic enable 
set oversized enable 
set scanerror enable 
set signature enable 
set suspicious enable 
set switching-protocols enable 
set url-filter enable 
set vulnerability enable 
set web-content enable 
set web-filter-activex enable 
set web-filter-applet enable 
set web-filter-command-block enable 
set web-filter-cookie enable 
set web-filter-ftgd-quota enable 
set web-filter-ftgd-quota-counting enable 
set web-filter-ftgd-quota-expired enable 
set web-filter-script-other enable
end
###########################
# Log Settings Eventfilter
###########################
config log eventfilter
set event enable
set router enable
set system enable
set user enable
set vpn enable
set wan-opt enable
set wireless-activity enable
end

